Privacy Policy

Effective date: 2026-05-10 · Last updated: 2026-05-20

This Privacy Policy explains what personal information Federico Bello ("Rupta", "we", "us") collects when you use the Rupta mobile app (the "Service"), how we use and share it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

Information you provide directly

• Account information from Apple or Google sign-in: name and email address.
• Profile details you choose to add: username, display name, bio, city, date of birth, preferred quest categories, and activity styles.
• Quest content: photos, videos, captions, ratings, and comments you submit to record quest completions.
• Social interactions: friend requests, group memberships, comments, and "respect" reactions you give or receive.
• Reports and support requests: messages you send us about other users or about the Service.

Information we collect automatically

• Device and app information: device type, operating system, app version, language, and time zone.
• Push notification tokens: the unique tokens issued by Apple or Google so we can deliver push notifications you have permitted.
• Log data: IP address and request metadata associated with API calls, retained for security and debugging.

Information from payment providers

When you purchase a Rupta Pro subscription through Apple or Google, the payment is processed by those platforms. Rupta does not receive your payment card information. We receive a non-personally-identifying customer identifier and entitlement state (whether your subscription is active and when it expires) via RevenueCat, our subscription management provider.

2. How we use information

We use information to:

• Create and operate your account, including signing you in via Apple or Google.
• Provide core features: posting quest completions, managing groups and challenges, computing AURA, leaderboards, and friend lists.
• Deliver push notifications you have opted in to (e.g., friend requests, comments, group activity).
• Process subscriptions and entitlement state through Apple, Google, and RevenueCat.
• Maintain trust and safety: review reports, detect abuse, and enforce our Terms of Service.
• Diagnose technical problems and improve the Service.
• Comply with legal obligations.

3. When we share information

We do not sell your personal information. We share information only as described below:

• With other users. Profile details you make visible (username, display name, avatar, bio, AURA) and content you post (quest completions, comments, reactions) are visible to other users in accordance with the privacy settings you choose. Content you mark as private to a group is visible only to members of that group.
• With service providers. We use the third parties listed in section 4 to operate the Service. They process data on our behalf under contracts that limit how they may use it.
• For legal reasons. We may disclose information when we believe in good faith that disclosure is required by law, court order, or to protect the rights, safety, or property of Rupta, our users, or the public.
• In a corporate transaction. If Rupta is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction. We will notify users before personal information becomes subject to a different privacy policy.

4. Third-party processors

The following providers process data on our behalf:

• Supabase — hosts our database and authentication backend. Stores account data and user-generated content.
• Cloudflare — hosts uploaded photos and videos via Cloudflare Images and Cloudflare Stream.
• RevenueCat — manages subscription state and receives non-personally-identifying customer identifiers and entitlement events from Apple and Google.
• Apple — provides Sign in with Apple, in-app purchase processing on iOS, and Apple Push Notification service.
• Google — provides Google sign-in, in-app purchase processing on Android, and Firebase Cloud Messaging for Android push notifications.

5. How long we keep information

We keep your account information and content for as long as your account is active. When you delete your account (see Account Deletion), we delete your profile, completions, photos, videos, comments, and reactions within 30 days, with the following exceptions:

• Encrypted database backups may persist for up to 30 additional days before being automatically rotated and overwritten.
• Anonymized log data with no link to your account may be retained longer for security and statistical purposes.
• Records required by law (such as tax, accounting, or fraud-prevention records) may be retained for the period required by applicable law.

6. Your rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal information.
• Object to or restrict certain processing.
• Request a portable copy of your information.
• Withdraw consent (where processing is based on consent).

You can exercise most of these rights from inside the app: edit your profile, change visibility settings, manage push notifications, and request account deletion. For other requests, contact us at fe.debello13@gmail.com.

7. Children's privacy

Rupta is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account and any associated information.

8. International data transfers

Our service providers may process information in countries other than the one where you live. These countries may have data protection laws different from those in your country. Where required, we put in place safeguards (such as standard contractual clauses) to protect transferred information.

9. Security

We use industry-standard security practices, including encryption in transit (HTTPS) and access controls on our backend. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you in accordance with applicable law.

10. Changes

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and, for material changes, give reasonable notice in the app or by email.

11. Contact